Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, Wallos allows an authenticated user to delete avatar files uploaded by other users. The avatar deletion endpoint does not verify that the requested avatar belongs to the current user. As a result, any authenticated user who knows or can discover another user's uploaded avatar filename can delete that file. This issue has been patched in version 4.6.2.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-30842 Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, Wallos allows an authenticated user to delete avatar files uploaded by … https://www.cve.org/CVERecord?id=CVE-2026-30842
Post summary
The post announces CVE-2026-30842, noting that before version 4.6.2 an authenticated user could delete avatar files, a flaw that is fixed in the listed release.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-30842 - Wallos: Authenticated Missing Authorization Allows Deletion of Other Users’ Uploaded Avatars Intel Report: https://ift.tt/OKuekTW
Post summary
The alert announces CVE‑2026‑30842, a Wallos vulnerability where authenticated users can delete others’ avatars due to missing authorization, but provides no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-30842 Authenticated Avatar Deletion Vulnerability in Wallos Subscription Tracker https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30842
Post summary
The notice announces a newly disclosed authenticated avatar deletion vulnerability in Wallos Subscription Tracker, with no further details on exploitation or remediation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wallosapp | wallos | - | - | - |